vormirdieSinflut

Basically, setting up a new Windows 10 with Office 365 is relatively quick. But if the whole thing is in a network with possibly a Sinology Nas system, current printing presses, label printer drivers, cams spec. Software, etc., then half a day can quickly go by. And with 3 work stations that’s already 1.5 days. And actually it’s just in the email program. Maybe someone has an idea how to avoid this hassle.

This statement is only partially true. I am and have always been extremely careful. I only ever open emails from trustworthy senders. I’ve never wandered around on indecisive pages. I’ve never downloaded any tools or software from the internet. And yet I was repeatedly banned for over six months. And I even let Swisscom support seduce me into clicking on links or tools in their emails. Swisscom will not be spared either. People are forced to pay electronic invoices, even though many have already been hacked with fake emails from alleged Swisscom. That’s why I still demand paper technology. It’s really not always the user. Technical defects and constant changes by providers are often responsible. Often you are used as a test subject as a final round so that you can save on development costs.

It was the same for me. Adobe also distributed my email address in 2008, I think.

I felt exactly the same. Incompetent Swisscom supporters who greatly overestimate their competence. Everything is automated, which is of course understandable in a large company like Swisscom. But the processes should definitely be reconsidered. If the private sector worked like that, they would be bankrupt long ago. Swisscom is strong for sales and constant surveys as soon as you put the phone down. It is weak for concrete assistance. Very weak actually.

I would have expected more support from Swisscom. The majority of Swisscom’s supporters had no idea. And if you stir things up during support because you work from home, that doesn’t show any seriousness at all. Sorry, but that’s just not possible and that’s why I can’t say anything positive about it.

The new beta version of the firmware should use a red beetle to indicate which devices are causing the problem. In addition, the default values ​​have been corrected.

No, I didn’t understand. Because even after resetting the cameras and removing them from the network, the WiFi internet connection was blocked. Or Melani’s reports lag so behind that you can never really understand which devices are responsible.
all very strange

Hello guys, I had the same problem from October 2020 to May 2021 that Swisscom kept blocking me, supposedly because of the Mirai virus. This was reported by Melani. I then spent around 4,000.00 on time and having all the devices reinstalled by an IT company. But nothing helped.
I then asked Melani directly for details. They were able to tell me which device was the culprit. It was DLink’s surveillance cameras. A message to DLink then triggered that I received a beta version of the firmware. I also turned off IPV6 on the router and set the firewall settings in the Swisscombox to strict. I also demanded that Swisscom install the always promised beta version of the firmware.
I also changed all of the default passwords for the smart TV devices. Unfortunately, I had absolutely no support from Swisscom and I had to do all the research and apply pressure myself. In the end I received 600.00 in compensation because of the activities. Actually ridiculous when you consider the busyness I had and Swisscom actually instructed me to reset the devices, even though that wasn’t the issue at all. But rather in the settings of the router and the firmware of the DLink cameras. The alleged error messages apparently fit the pattern of the Mirai virus because I was always blocked.
It is not acceptable that Swisscom does not offer more support or provide more concrete information.
I hope I could help you with that.

Here is a link from another affected person who experienced the same thing as me.

[https://community.swisscom.ch/t5/Archiv-Internet/Swisscom-Internet-because-abuse-gesperrt/td-p/531817/page/2](https://community.swisscom.ch/t5/ Archive-Internet/Swisscom-Internet-blocked-due-to-abuse/td-p/531817/page/2)

Some of the same people responded here in this post. Strange that a similar case is not remembered.

Yes, now I have deactivated that. That’s actually the purpose of the CAM, that you can access the cams via DS cam from your iPhone while on vacation to see whether everything is going well. But as I said, I’ve now taken it off the network and if that’s the problem, you should actually hold the manufacturer of these cams responsible.

I forgot to list the printer. This automatically reports the meter reading to the Sharp company because I have a service contract. There’s probably a port like that open there too. 😞

I hope that because of the lively chat here I won’t be labeled as spam or something else and blocked again. So now I wish everyone involved a good night. Thanks everyone for now. I’ll report back what’s going on

Ok Cam are off the network

The closures have been different since last autumn. Once I had 1 month of rest, then 14 days. Then after a new IP last week and again yesterday.

Hello Werner

I will follow this and take the cams off the network.

So allow automatic port forwarding (UPnPIGD) is activated for me. You mean I should deactivate that?

As mentioned, I also switched the firewall to strict so that I don’t have all ports open.

And what do you mean by some time?

1 day, 2 days or over weeks?

Can I do more than reset these devices? I actually don’t want to buy new ones.

Your tip with a switch with port mirroring, a packet sniffer, can you tell me a reputable device or tool. There are so many on the internet that I don’t dare install. Of course I won’t do it myself anyway, but I’ll make it a suggestion to the IT department.

I could still understand why it hit the smart TV because they had a default password. Like probably 99% in this world. But the cam works over WiFi with the WPA2 settings and I also reset all the passwords there. I will follow your advice and take the cams off the network for now.

DCS cam and Bose boxes were reinstalled with hard reset and the latest firmware.

All WiFi passwords reset.

As Swisscom told me before the last blocking, there will be new firmware on the Swisscom Internet boxes from February onwards, where the infected devices will be marked with a red beetle in the network technology. When asked, my Internet box was on the latest firmware version. During the last blocking, however, another employee told me again that my Internetbox 3 was not yet equipped with this firmware. You can see how I as a customer have to deal with these statements from Swisscom.

I will now wait until I am blocked again. Maybe they’ll install the latest firmware on my Internetbox 3.

If not, I’ll switch to another provider with all subscriptions. Of course, with prior assurance about what the new provider will do with such a situation.

Power MAC

Yes, I was already advised about such sniffers by Swisscom. I also reported this to the IT company. But they wanted to put an expensive device in front of the Swisscom router and charge an annual fee of around 600.00 from 3 years onwards. I’m a micro-business and can’t afford that. What kind of one-man business requires such a huge amount of effort? I think I’m the exception. I also have the Office solution Buissines 365 and no student license.

Yes, I’m slowly leaning towards your statement that only Windows protection should be installed. But that’s exactly what takes courage. I wanted to take out cyber insurance. But I don’t think a 1000.00 deductible and insurance in the event of damage is the right way either. I don’t want to let any harm come to it. Apparently it caught me despite the precautionary measures. I have absolutely no illegal software installed. Bought everything. I also don’t hang around on relevant websites. And I don’t have any exotic set in my network. I think it’s normal

- 2 Windows PCs with the latest Windows 10 operating system

- 1 Nas from Synology 218x with Antivirus Essential

- 3 TV devices, 2 of which are Samsung Smart TVs with new admin passwords

- 3 DCS-2670L Cam for monitoring the environment, some connected via WiFi

- 4 Bose speakers Soundtouch 10, 20, 30, some connected via WiFi

- 3 WiFi amplifiers from Swisscom

- 1 Internet box from Swisscom

- 2 TV boxes from Swisscom

- 2 telephone connections with 2 sets

Except for the Swisscom devices, all devices were reset and reinstalled.

I don’t think I can do more.

As mentioned, I don’t connect my iPad or iPhone to the home network. This means that these devices have their own IP and these connections have never been blocked.

Just always have an internet connection via PC. And that too with a brand new system that was freshly purchased in January. Specifically, the internet connection was blocked before the new device and also with the new device. Whenever I entered the address directly without https in the browser, whether Firefox or Internet Explorer. So example sbb.ch. 50 times went well then I was blocked again. However, when I entered sbb in Google despite being blocked and then clicked on the link that just generated a https://www.sbb.ch/de/ I came despite being blocked by Swisscom.

Since I tried everything to get to the bottom of the error, I of course also bought paid VPNs from Kaspersky and CCleaner. However, I have since uninstalled it following your advice. Regardless of whether I had these tools or not, I was blocked by Swisscom.

I received a report from Swisscom. However, no concrete information. For me, probably doesn’t mean certain. A technician sent me the following message while we were on the phone. So no fake email

************************* ****************

          Email

************************* *****************

************************* *****************

 Attachment Reason for Barring

************************* *****************

You are receiving this email because you are registered in our system as a contact for AS3303 or because your email address is registered with RIPE as an abuse contact for AS3303.

The National Center for Cyber ​​Security (NCSC) has been notified by a partner of one or more Internet of Things (IoT) devices on your network that have most likely been compromised by hackers and are now being used for malicious purposes . Attached you will find a list of affected IP addresses that have been reported to us in the past 24 hours.

The affected devices were most likely infected with a malware called Mirai through the use of a default password.

We recommend that you identify the affected devices or customers and secure and clean them up (e.g. by resetting the device to the factory settings). You can find an overview of NSCS recommendations regarding IoT devices on our website.

Security in the “Internet of Things” (IoT):

https://www.melani.admin.ch/iotsicherheit

01/29/2021 10:50:59 +0000,111.11.111.11 (IP was changed)*********************** *******************

 Attachment Lookup Information

************************* *****************

Lookup with 111.11.111.11 (IP has been changed) and date Fri Jan 29 10:50:59 GMT+00:00 2021

************************* *****************

          Info mail

************************* *****************

And I took all of these measures. And as mentioned, have it checked by an IT company.

PowerMac

Anyone who can read has a clear advantage. Firstly, after the second shutdown of the internet connection, I immediately commissioned my IT specialist, who has owned an IT company for 25 years, to check the devices and set them up again. Except these Smart TV devices and WiFi Bose boxes were not made because Swisscom was also convinced that these devices could not be the ones. However, I then reset these devices myself. As a loan, I dared to stick a paper clip in the hole and perform a reset and then get it working again with the latest firmware. Swisscom is my contractual partner and it cannot be the case that I, as a customer, contact Melani about the problem and get more detailed information on how and why. It is unlikely that you will have a direct contact person at Swisscom. Every employee has to read up on the case and in the home office they don’t have any other options than I have in the customer center with expert mode. It also annoys me when cooking pots clink and children’s screams can be heard in the background. This does not speak at all for serious customer service. Regardless of whether I got myself into something or not. Google spits out a few such cases, which ultimately turned out to be error messages.

I was banned allegedly due to malware on one of my devices. Probably Mirai. But not 100% sure either. I was registered in the blacklist with Spamhaus and SORB. Although the SORBS entries were from 2009. When Swisscom gave me a new IP the week before last, there was another entry from Spamhaus in it just 2 minutes after changing the new IP. I suspect that I took that over from the predecessor.
Basically, I really don’t click on any links that I don’t know. They are all work tools. I even got into the habit of looking at the emails on my iPhone to see whether they are spam or other unwanted emails and then deleting them. So they don’t even come to my PC. I generally don’t try to connect my iPhone to the network.
As mentioned, after the information that a device in my network was infected with Mirai, it was reset and reinstalled. Only when I was blocked again did I reset and reinstall TVs and presenters that had a default password. All in all, around 1500.00 was transferred to the IT company and it took around a week to set everything up again. Does anyone know of a tool that monitors the network, which devices are sending what and how much? I can view network activity in Kaspersky. However, I don’t see any irregularities. I also switched off V6IP in the Swisscom Internetbox and set the firewall settings to strict.
My Latin has now come to an end. I think I’ve done everything possible. In addition, these Swisscom employees tell me something different every time. And with some Swisscom employees you can tell that they are in the home office and, in addition to giving advice, are still stirring things up instead of trying to provide help.

Yes, I changed all passwords. Do you really mean that I no longer need additional virus protection with Windows 10? Isn’t that a bit negligent? What additional virus protection do you use?

The more they blocked me and I relied on the different opinions of Swisscom employees, the more shitty tools I installed. That was probably the mistake. I had this VPN monitoring from Kaspersky as well as CCleaner. I’ve now uninstalled it. I have a NAS from Synology and I also had it checked by an IT company. The surveillance cameras were also completely reset. Hard reset.